https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-17T21:06:59.669602+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-18659 CVE-2026-18659 — Unauthenticated authorization bypass in ConstraintSecurityHandler - HTTP method-omission matched by substring 2026-10-17T21:06:59.670507+00:00

Affected: Eclipse Foundation org.eclipse.jetty.ee11:jetty-ee11-servlet, Eclipse Foundation org.eclipse.jetty.ee10:jetty-ee10-servlet, Eclipse Foundation org.eclipse.jetty.ee9:jetty-ee9-security, Eclipse Foundation org.eclipse.jetty.ee8:jetty-ee8-security, Eclipse Foundation org.eclipse.jetty:jetty-security

In Eclipse Jetty, across various versions of `jetty-security`, and `jetty-eeN-security`, and `jetty-eeN-servlet`, the Jakarta Spec constraints defined as `http-method-omission` can be bypassed by using substrings of the defined HTTP Methods.